Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
File: lPhZ34Ux35GpQAj0tJIKQSPrDws.mft (raw, json)
Hash identifier: Y+chXmbynZOoTPaiWAE4wBhtETlgXyXlB41THwiwGeQ=
Subject key identifier: BE:93:0D:05:1B:3F:ED:23:17:01:27:B8:51:B4:0A:43:67:22:93:6D
Authority key identifier: 94:F8:59:DF:85:31:DF:91:A9:40:08:F4:B4:92:0A:41:23:EB:0F:0B
Certificate issuer: /CN=94f859df8531df91a94008f4b4920a4123eb0f0b
Certificate serial: 019A71B7EF1968A1A3ABC0EDC2F866C5AC82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
Manifest number: 15A6
Signing time: Tue 11 Nov 2025 07:01:10 +0000
Manifest this update: Tue 11 Nov 2025 07:01:10 +0000
Manifest next update: Wed 12 Nov 2025 07:01:10 +0000
Files and hashes: 1: lPhZ34Ux35GpQAj0tJIKQSPrDws.crl (hash: HaaYgWiZWVo9HPPqA+/16ZJS2KF9zrvftzmzgYTTAtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ef:19:68:a1:a3:ab:c0:ed:c2:f8:66:c5:ac:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f859df8531df91a94008f4b4920a4123eb0f0b
Validity
Not Before: Nov 11 07:01:10 2025 GMT
Not After : Nov 12 07:01:10 2025 GMT
Subject: CN=be930d051b3fed23170127b851b40a436722936d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e5:16:b8:0d:ef:ba:3c:64:f5:c5:d4:46:3c:
26:bb:10:e9:99:77:05:42:be:9b:2f:c4:51:ea:7d:
23:4e:e0:86:f3:61:a3:d2:9b:70:e9:17:b3:9f:ad:
ef:c0:ff:98:09:7c:84:a9:be:03:ba:69:aa:58:b9:
66:64:2e:f5:b8:7d:9e:e5:8d:1c:44:b2:5d:c8:b8:
d9:2b:92:f5:ee:ae:bb:3d:ed:1c:ab:91:69:3e:6c:
03:2e:c5:19:59:5d:35:86:b4:14:a1:ca:cf:91:bd:
d2:9d:33:8d:23:51:7a:dc:85:7c:77:11:e1:a6:03:
4b:86:b5:06:8f:8c:a1:8d:1d:dc:c8:22:c8:33:b4:
ec:8e:cc:fb:cb:d6:4c:36:50:0e:2c:4b:50:6b:4f:
44:7a:1d:4e:2e:1a:73:63:22:16:e6:f9:1f:4a:e8:
a6:cd:e1:d4:fa:33:dd:bb:4b:a2:20:ae:e6:7c:b8:
77:94:03:ef:47:aa:0f:5f:1f:88:3e:05:1b:de:f0:
83:e2:23:cc:31:1a:fc:53:26:6e:c5:d3:86:56:81:
ae:e2:2e:04:45:a1:7e:9e:0d:04:65:df:0a:f5:a0:
83:e0:66:7a:e3:26:2d:94:40:bd:0f:49:0b:3f:d3:
9e:ed:cb:ab:75:14:e3:30:26:8c:c0:f2:b8:ba:c9:
02:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:93:0D:05:1B:3F:ED:23:17:01:27:B8:51:B4:0A:43:67:22:93:6D
X509v3 Authority Key Identifier:
keyid:94:F8:59:DF:85:31:DF:91:A9:40:08:F4:B4:92:0A:41:23:EB:0F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:94:4c:ea:de:7c:8f:1e:80:d8:46:f3:a8:6d:00:11:2a:9c:
eb:c2:47:db:aa:da:81:34:a8:8d:e8:3e:ae:eb:e3:ba:12:47:
16:12:05:e9:00:ec:6c:d3:64:15:6c:d9:87:51:ab:99:57:c7:
2d:49:d1:b5:70:2d:02:aa:b5:64:67:fa:ad:91:d0:db:8e:66:
51:a9:19:3f:01:b4:d7:da:7c:e7:7e:e0:21:72:31:a0:6a:3d:
57:7e:bf:25:61:7a:0d:1f:8f:a2:00:ef:ec:0f:99:a0:8f:2b:
3f:9b:e8:54:5b:a3:58:07:30:18:a3:f6:09:44:3d:9b:18:98:
71:38:17:cf:1e:69:eb:07:d4:e5:16:72:2a:b1:ad:98:7e:a2:
bf:04:88:51:53:cc:5f:af:1f:a0:fc:7c:09:80:d3:2c:0e:c2:
c5:24:76:39:ba:f8:20:60:b2:80:be:63:a1:28:35:79:b0:4d:
ef:e6:bb:c0:6e:ae:f2:d2:87:9e:d1:21:85:58:67:52:dd:b6:
e1:61:d6:86:3c:f8:7a:a9:c4:90:bb:75:cc:d9:7c:da:60:f0:
e7:6f:90:90:c0:52:23:75:c8:18:e4:9a:f4:f2:ee:99:bb:a2:
89:36:d2:47:e0:be:ea:e4:fd:49:d1:06:57:43:eb:c8:f0:14:
e9:d4:c2:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt+8ZaKGjq8DtwvhmxayCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0Zjg1OWRmODUzMWRmOTFhOTQwMDhmNGI0OTIwYTQxMjNl
YjBmMGIwHhcNMjUxMTExMDcwMTEwWhcNMjUxMTEyMDcwMTEwWjAzMTEwLwYDVQQD
EyhiZTkzMGQwNTFiM2ZlZDIzMTcwMTI3Yjg1MWI0MGE0MzY3MjI5MzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeUWuA3vujxk9cXURjwmuxDpmXcF
Qr6bL8RR6n0jTuCG82Gj0ptw6Rezn63vwP+YCXyEqb4DummqWLlmZC71uH2e5Y0c
RLJdyLjZK5L17q67Pe0cq5FpPmwDLsUZWV01hrQUocrPkb3SnTONI1F63IV8dxHh
pgNLhrUGj4yhjR3cyCLIM7Tsjsz7y9ZMNlAOLEtQa09Eeh1OLhpzYyIW5vkfSuim
zeHU+jPdu0uiIK7mfLh3lAPvR6oPXx+IPgUb3vCD4iPMMRr8UyZuxdOGVoGu4i4E
RaF+ng0EZd8K9aCD4GZ64yYtlEC9D0kLP9Oe7curdRTjMCaMwPK4uskCOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6TDQUbP+0jFwEnuFG0CkNnIpNtMB8GA1UdIwQY
MBaAFJT4Wd+FMd+RqUAI9LSSCkEj6w8LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFBoWjM0VXgzNUdwUUFqMHRKSUtRU1ByRHdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kYzkyMjQtM2NkNy00MzdkLWExZGMt
ZThjMzljZjY2YjNmLzEvbFBoWjM0VXgzNUdwUUFqMHRKSUtRU1ByRHdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kYzkyMjQtM2NkNy00MzdkLWExZGMtZThjMzljZjY2YjNm
LzEvbFBoWjM0VXgzNUdwUUFqMHRKSUtRU1ByRHdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpRM6t58
jx6A2EbzqG0AESqc68JH26ragTSojeg+ruvjuhJHFhIF6QDsbNNkFWzZh1GrmVfH
LUnRtXAtAqq1ZGf6rZHQ245mUakZPwG019p8537gIXIxoGo9V36/JWF6DR+PogDv
7A+ZoI8rP5voVFujWAcwGKP2CUQ9mxiYcTgXzx5p6wfU5RZyKrGtmH6ivwSIUVPM
X68foPx8CYDTLA7CxSR2Obr4IGCygL5joSg1ebBN7+a7wG6u8tKHntEhhVhnUt22
4WHWhjz4eqnEkLt1zNl82mDw52+QkMBSI3XIGOSa9PLumbuiiTbSR+C+6uT9SdEG
V0PryPAU6dTCkQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:18 2025 by rpki-client